CVE-2010-5289

CVE-2010-5289 describes a buffer overflow vulnerability in the Authenticate method of the INCREDISPOOLERLib.Pop ActiveX control within ImSpoolU.dll, affecting IncrediMail 2.0. This flaw allows remote attackers to trigger a denial of service through an application crash or potentially achieve further unspecified impact by providing an excessively long string as the first argument. With a CVSS score of 7.5 (High) and a FAUCET Risk Score of 91/100, the vulnerability is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.